EUVD-2025-120538

Malicious code in webpack-carpo-enceladus-aether npm...

EUVD-2025-115669

Malicious code in carpo-docusaurus-run-script-aldebaran npm...

EUVD-2025-114992

Malicious code in cors-carpo-webdriver-mocha-start npm...

EUVD-2025-111884

Malicious code in kronos-terser-carpo-nconf npm...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111527

Malicious code in luna-xenos-relay-carpo npm...

EUVD-2025-120964

Malicious code in uninstall-prompts-carpo-auriga npm...

Malicious code in halley-enceladus-install-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122166

Malicious code in sedna-carpo-yaml-server npm...

Malicious code in sedna-carpo-yaml-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115652

Malicious code in carpo-typeorm-playwright-rimraf npm...

EUVD-2025-111767

Malicious code in less-socketio-loglevel-carpo npm...

EUVD-2025-120630

Malicious code in wasat-restart-loglevel-carpo npm...

EUVD-2025-123968

Malicious code in parcel-carpo-cypress-sync npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

EUVD-2025-112595

Malicious code in ignite-jovian-carpo-ganymede npm...

EUVD-2025-121242

Malicious code in titan-nashira-achernar-carpo npm...

EUVD-2025-121451

Malicious code in taurus-postcss-carpo-unuk npm...

Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...